grandstand 0.2.7 → 0.3.0

data/Gemfile

@@ -0,0 +1,6 @@
+source 'http://rubygems.org'
+
+gem 'aws-s3', '>= 0.6.2', :require => 'aws/s3'
+gem 'mustache', '>= 0.11.2'
+gem 'paperclip', '>= 2.3.3'
+gem 'will_paginate', '>= 2.3'

data/README.md

@@ -0,0 +1,72 @@
+# Grandstand
+
+Grandstand is a Rails 3 Gem that allows you to build totally simple blogs and portfolios using a gallery and blog post editor.
+
+## 5-Minute Install
+
+To get Grandstand up-and-running in five minutes or less:
+
+1. In your terminal: `rails new site && cd site`
+2. And then: `echo "gem 'grandstand', '>= 0.3.0'" >> Gemfile && bundle install`
+3. And then: `rails generate grandstand:install`
+4. And then: `rake db:migrate` and enter an e-mail and password for the first admin user
+5. And then start Rails: `rails s`
+6. Navigate to [http://localhost:3000/grandstand](http://localhost:3000/grandstand) to get started.
+
+## Configuration
+
+Grandstand uses S3 to store image files. In order to configure it, you need to take a peek at config/s3.yml and add your access keys there. Grandstand automatically generates this file for you. It should look like this:
+
+	access_key_id: YOURSECRETACCESSID
+	secret_access_key: YOUR-secRE/TACCe\ssKEy
+
+Grandstand also generates config/initializers/grandstand.rb. It has examples of all the configuration options you can set in Grandstand, of which there are precious few. Here's an overview of them:
+
+1. **Image sizes:** Used to control how your images are resized when they are uploaded. It's a hash
+  that accepts the size name as the key and the geometry string as the value, e.g.
+
+      Grandstand.image_sizes[:large] = '800x600#'
+
+2. **S3 storage settings:** A Paperclip-style hash of S3 storage settings. You need to supply, at a
+  minimum, a :bucket and a :credentials setting in order to upload images. Credentials will automatically
+  be read from config/s3.yml, but you can override them as well. Ahem:
+
+      Grandstand.s3[:bucket] = "yourmom"
+      Grandstand.s3[:credentials] = {:access_key_id => "foo", :secret_access_key => "bar"}
+
+  You can also do something like this:
+
+      Grandstand.s3 = {:credentials => {:access_key_id => "foo", :secret_access_key => "bar"}, :bucket => "yourmom"}
+
+3. **Admin routing settings:** Allow you to control the admin interface in certain ways, e.g. requiring SSL, using a
+  different domain (for Heroku users, this will let you use the free SSL option), using a different path (default is
+  "/grandstand"), etc. The following keys will work wonders for you:
+
+		* :domain => The domain the admin interface should require users to be at. Useful if you want to piggyback on Heroku's SSL without paying for a certificate.
+		* :path => The path for the admin interface. The default is 'http://localhost:3000/grandstand' but you can change to 'admin' or whatever to force it to 'http://localhost:3000/admin'
+		* :ssl => require SSL. Best to turn this on in production (which is the default in config/initializers/grandstand.rb)
+
+## Admin Interface
+
+Grandstand has a basic admin interface that allows you to manage blog posts, galleries, and users. That's... like... it. You can access it by starting your app and visiting [http://localhost:3000/grandstand](http://localhost:3000/grandstand), where you'll need to log in with the username/password you set up when you installed Grandstand. Inside of it, you'll be able to edit galleries, blog posts, and users.
+
+### Galleries
+
+Grandstand's gallery editor is pretty straightforward. First, add a gallery. Then go to that gallery and upload images.
+
+**Note:** I *very* strongly recommend you keep the multiple image uploader turned off until you've got SSL set up, as it has the potential to open up a security hole.
+
+### Blog Posts
+
+Blog posts come in one basic flavor: simple. The WYSIWYG editor will nicely clean pasted text including Word content (except in Firefox, which has shit access to the clipboard even when pasting). It will also let you embed images and, someday, entire galleries. Blog posts ***do not*** come with comments, since you're smart enough to be using Disqus or one of its friends. Plus, I'm fundamentally opposed to the idea of comments on blogs in the first place. All they've ever done is caused trouble.
+
+### Users
+
+Duh. These are the people using Grandstand. There are no roles, no specific permissions, no drafting processes. Just users.
+
+## Bugs, Tests, and Contributions
+
+Please file bug complaints in [Github Issues](http://github.com/flipsasser/grandstand/issues). Please also fork and do things like add tests or make the WYSIWYG editor work for the Grandstand::PagesController. I also need more documentation and your mom.
+
+
+Copyright (c) 2011 Flip Sasser, released under the MIT license

data/app/controllers/galleries_controller.rb

@@ -1,4 +1,8 @@
 class GalleriesController < ApplicationController
+  def index
+    @galleries = Grandstand::Gallery.where(:published => true).paginate(:page => params[:page])
+  end
+
   def show
     @gallery = Grandstand::Gallery.where(:id => params[:id]).first
   end

data/app/controllers/grandstand/galleries_controller.rb

@@ -12,6 +12,13 @@ class Grandstand::GalleriesController < Grandstand::MainController
     end
   end
 
+  def delete
+    unless @gallery.published?
+      flash[:error] = 'You cannot delete this gallery. It is required by the system.'
+      redirect_to return_path || grandstand_galleries_path
+    end
+  end
+
   def destroy
     @gallery.destroy
     flash[:delete] = 'Your gallery has been deleted'
@@ -19,9 +26,11 @@ class Grandstand::GalleriesController < Grandstand::MainController
   end
 
   def index
-    @galleries = Grandstand::Gallery.all
     if request.xhr?
+      @galleries = Grandstand::Gallery.all
       render :editor
+    else
+      @galleries = Grandstand::Gallery.where(:published => true).all
     end
   end
 

data/app/controllers/grandstand/images_controller.rb

@@ -7,8 +7,12 @@ class Grandstand::ImagesController < Grandstand::MainController
   def create
     @image = @gallery.images.new(params[:image])
     if @image.save
-      flash[:success] = 'Your image was successfully uploaded'
-      params.has_key?('Filename') || request.xhr? ? render(:json => {:status => :ok}) : redirect_to(grandstand_gallery_path(@gallery))
+      if params.has_key?('Filename') || request.xhr?
+        render(:json => {:status => :ok})
+      else
+        flash[:success] = 'Your image was successfully uploaded'
+        redirect_to(grandstand_gallery_path(@gallery))
+      end
     else
       render :new
     end
@@ -51,7 +55,9 @@ class Grandstand::ImagesController < Grandstand::MainController
     end
   end
 
-  def upload
+  if Grandstand.multiple_upload
+    def upload
+    end
   end
 
   protected

data/app/controllers/grandstand/main_controller.rb

@@ -1,9 +1,7 @@
 class Grandstand::MainController < ApplicationController
   skip_before_filter :find_page
   before_filter :require_user
-  if Rails.env.production?
-    before_filter :require_ssl
-  end
+  before_filter :require_ssl if Grandstand.routing[:ssl]
   before_filter :set_return_path, :only => [:index, :show]
 
   layout :grandstand_layout
@@ -24,7 +22,7 @@ class Grandstand::MainController < ApplicationController
   end
 
   def grandstand_not_found(options = {})
-    options = {:layout => 'minimal', :status => 404, :template => 'shared/404'}.merge(options)
+    options = {:layout => 'grandstand_minimal', :status => 404, :template => 'shared/404'}.merge(options)
     render options
     false
   end

data/app/controllers/grandstand/pages_controller.rb

@@ -1,5 +1,5 @@
 class Grandstand::PagesController < Grandstand::MainController
-  before_filter :find_page, :except => [:create, :index, :new]
+  before_filter :find_page, :except => [:create, :index, :new, :reorder]
   before_filter :build_page_sections, :only => [:edit]
 
   def create
@@ -28,6 +28,13 @@ class Grandstand::PagesController < Grandstand::MainController
     build_page_sections
   end
 
+  def reorder
+    params[:pages].each_with_index do |page_id, index|
+      Grandstand::Page.update(page_id, :position => index + 1)
+    end if params[:pages]
+    render :json => {:status => :ok}
+  end
+
   def update
     if @page.update_attributes(params[:page])
       flash[:success] = "#{@page.name} was successfully saved"

data/app/controllers/grandstand/sessions_controller.rb

@@ -2,7 +2,7 @@ class Grandstand::SessionsController < Grandstand::MainController
   before_filter :require_no_user, :except => [:destroy]
   skip_before_filter :require_user, :except => [:destroy]
   skip_before_filter :set_return_path
-  layout 'grandstand_login'
+  layout 'grandstand_minimal'
 
   def create
     login_attempts = (session[:login_attempts] || 0).next

data/app/helpers/grandstand/main_helper.rb

@@ -1,4 +1,21 @@
 module Grandstand::MainHelper
+  # Returns 'active' if the current page matches the passed URL hash. This will
+  # require the controller to match. If one or more action is passed, those actions
+  # (or params[:return_to]) must match as well. If not, it lets the controller mean
+  # it's active.
+  def active_on(*conditions)
+    match = lambda do |condition|
+      controllers = Array(condition.delete(:controller)).compact.flatten.map(&:to_s).uniq
+      actions = Array(condition.delete(:action)).compact.map(&:to_s).flatten.uniq
+      controllers.include?(controller_name) && (actions.empty? || actions.include?(action_name) || actions.include?(params[:return_to]))
+    end
+    options = {}
+    if conditions.any?(&match)
+      options[:class] = 'active'
+    end
+    options
+  end
+
   # Renders a <button> tag. Helpful for forms and the like.
   # 
   #   <%= button("Save Changes", :class => "blue") %>

data/app/models/grandstand/gallery.rb

@@ -1,7 +1,8 @@
 class Grandstand::Gallery < ActiveRecord::Base
+  set_table_name :grandstand_galleries
   before_save :set_url
   belongs_to :user
-  default_scope order('position, id')
+  default_scope order('published, position, id ASC')
   has_many :images, :dependent => :destroy
 
   validates_presence_of :name, :message => 'Your gallery needs a name'

data/app/models/grandstand/image.rb

@@ -1,4 +1,5 @@
 class Grandstand::Image < ActiveRecord::Base
+  set_table_name :grandstand_images
   belongs_to :gallery
   belongs_to :user
   default_scope order('position, id')

data/app/models/grandstand/page.rb

@@ -1,4 +1,6 @@
 class Grandstand::Page < ActiveRecord::Base
+  set_table_name :grandstand_pages
+
   attr_writer :new_parent_slug
 
   after_update :update_children
@@ -7,6 +9,8 @@ class Grandstand::Page < ActiveRecord::Base
   belongs_to :parent, :class_name => 'Page'
   belongs_to :user
 
+  default_scope order('position, id')
+
   has_many :children, :class_name => 'Page', :foreign_key => :parent_id
   has_many :page_sections, :dependent => :destroy
   accepts_nested_attributes_for :page_sections, :reject_if => lambda {|page_section| page_section['content'].try(:strip).blank? }

data/app/models/grandstand/page_section.rb

@@ -1,4 +1,6 @@
 class Grandstand::PageSection < ActiveRecord::Base
+  set_table_name :grandstand_page_sections
+
   belongs_to :page
   Grandstand.page_sections.each do |section|
     scope section.to_sym, where(:section => section)

data/app/models/grandstand/post.rb

@@ -1,4 +1,6 @@
 class Grandstand::Post < ActiveRecord::Base
+  set_table_name :grandstand_posts
+
   before_save :set_url
   before_validation :set_posted_at
   belongs_to :user

data/app/models/grandstand/user.rb

@@ -1,4 +1,6 @@
 class Grandstand::User < ActiveRecord::Base
+  set_table_name :grandstand_users
+
   attr_accessor :password
   attr_accessible :email, :first_name, :last_name, :password, :password_confirmation
 
@@ -53,15 +55,15 @@ class Grandstand::User < ActiveRecord::Base
   end
 
   # Returns a hash of a given password string. Used both for storing
-  # passwords and authenticating later. The DIGEST_STRETCHES constant
+  # passwords and authenticating later. The digest_stretches method
   # ensures passwords are hashed more than once - which prevents brute-
   # force attacks from being even remotely efficient. Take that, hacker
   # dickheads.
   def password_digest(password)
-    password_digest = SITE_KEY
+    password_digest = Grandstand.site_key
     # Perform stretching per RESTful Authentication's guidelines
-    DIGEST_STRETCHES.times do
-      password_digest = Digest::SHA1.hexdigest([password_digest, salt, password, SITE_KEY].join('--'))
+    Grandstand.digest_stretches.times do
+      password_digest = Digest::SHA1.hexdigest([password_digest, salt, password, Grandstand.site_key].join('--'))
     end
     password_digest
   end

data/app/views/grandstand/galleries/delete.html.erb

@@ -2,7 +2,7 @@
 <% form_for(@gallery, :as => :gallery, :html => {:method => :delete}, :url => grandstand_gallery_path(@gallery)) do %>
   <div class="field">You cannot undo this once it's done! This gallery, and all of its pictures, will be gone forever - poof!</div>
   <div class="toolbar">
-    <%= button('Delete', :default => true) %>
-    <%= button_link_to('Cancel', return_path || grandstand_gallery_path(@gallery), :class => 'cancel') %>
+    <%= button 'Delete', :default => true %>
+    <%= button_link_to 'Cancel', return_path || grandstand_gallery_path(@gallery), :class => 'cancel' %>
   </div>
 <% end %>

data/app/views/grandstand/galleries/edit.html.erb

@@ -2,7 +2,7 @@
 <% form_for(@gallery, :as => :gallery, :url => grandstand_gallery_path(@gallery)) do |form| -%>
   <%= render :partial => 'form', :locals => {:form => form} %>
   <div class="toolbar">
-    <%= button 'Save' %>
+    <%= button 'Save', :default => true %>
     <%= button_link_to('Cancel', grandstand_galleries_path, :class => 'cancel') %>
   </div>
 <% end -%>

data/app/views/grandstand/galleries/editor.html.erb

@@ -1,10 +1,10 @@
 <% if @galleries.empty? -%>
-<h2 class="error icon">Please Upload Images to a Gallery</h2>
+<h2>Please Upload Images to a Gallery</h2>
 <div class="center field">
-  <img alt="No Galleries" src="/grandstand/images/galleries-empty.png" />
+  <%= image_tag('/grandstand/images/icons/galleries-empty.png', :alt => 'No Galleries') %>
 </div>
 <div class="toolbar">
-  <%= button_link_to('Add a Gallery', new_grandstand_gallery_path, :class => 'remote', :icon => 'add') %>
+  <%= button_link_to('Add a Gallery', new_grandstand_gallery_path, :class => 'remote', :default => true, :icon => 'add') %>
   <%= button_link_to('Close', return_path, :class => 'cancel')%>
 </div>
 <% else -%>

data/app/views/grandstand/galleries/index.html.erb

@@ -1,11 +1,11 @@
-<% content_for :left do %>
+<% content_for :title do %>
   <%= button_link_to('Add a Gallery', new_grandstand_gallery_path, :class => 'remote', :icon => 'add') %>
 <% end %>
+<h2>Galleries</h2>
 <% if @galleries.empty? -%>
-<div class="inset">
-  <h2 class="">You haven't set up any galleries!</h2>
-  <%= image_tag('/grandstand/images/galleries-empty.png') %>
-  <br /><b class="grey">Get started:</b> <%= button_link_to('Add a Gallery', new_grandstand_gallery_path, :class => 'remote', :icon => 'add') %>
+<div class="pad">
+  <h3>You haven't set up any galleries!</h3>
+  <%= button_link_to('Add One Now?', new_grandstand_gallery_path, :class => 'remote', :icon => 'add') %>
 </div>
 <% else -%>
 <div class="galleries sortable">

data/app/views/grandstand/galleries/new.html.erb

@@ -2,7 +2,7 @@
 <% form_for(@gallery, :as => :gallery, :url => grandstand_galleries_path) do |form| -%>
   <%= render :partial => 'form', :locals => {:form => form} %>
   <div class="toolbar">
-    <%= button 'Add Gallery' %>
+    <%= button 'Add Gallery', :default => true %>
     <%= button_link_to('Cancel', grandstand_galleries_path, :class => 'cancel') %>
   </div>
 <% end -%>

data/app/views/grandstand/galleries/show.html.erb

@@ -1,16 +1,17 @@
-<% content_for :left do %>
-  <%= button_link_to('Upload An Image', new_grandstand_gallery_image_path(@gallery), :class => 'remote', :icon => 'upload') %>
-  <%= button_link_to('Upload Multiple', upload_grandstand_gallery_images_path(@gallery), :class => 'remote', :icon => 'upload') %>
-<% end %>
-<h1 class="galleries icon">
-  <%= @gallery.name %>
+<% content_for :title do %>
   <%= button_link_to('Edit', edit_grandstand_gallery_path(@gallery), :class => 'remote', :icon => 'edit') %>
   <%= button_link_to('Delete', delete_grandstand_gallery_path(@gallery), :class => 'remote', :icon => 'delete') %>
-</h1>
+  <% if Grandstand.multiple_upload -%>
+  <%= button_link_to('Add Images', upload_grandstand_gallery_images_path(@gallery), :class => 'remote', :icon => 'add') %>
+  <% else -%>
+  <%= button_link_to('Add An Image', new_grandstand_gallery_image_path(@gallery), :class => 'remote', :icon => 'add') %>
+  <% end -%>
+<% end %>
+<h2><%= @gallery.name %></h2>
 <% if @gallery.images.empty? -%>
-<div class="inset">
-  <h2>You haven't uploaded any images!</h2>
-  <b class="grey">Get started:</b> <%= button_link_to('Upload an Image', new_grandstand_gallery_image_path(@gallery), :class => 'remote') %>
+<div class="pad">
+  <h3>You haven't uploaded any images!</h3>
+  <%= button_link_to('Add an Image', new_grandstand_gallery_image_path(@gallery), :class => 'remote', :icon => :add) %>
 </div>
 <% else -%>
 <div class="images sortable">

data/app/views/grandstand/images/_form.html.erb

@@ -2,7 +2,7 @@
   <div class="field">
     <%= form.label :file %>
     <%= form.file_field :file %>
-    <%= form.errors_on(:image, :file) %>
+    <%= form.errors_on(:file) %>
   </div>
   <div class="field">
     <%= form.label :caption %>

data/app/views/grandstand/images/delete.html.erb

@@ -2,7 +2,7 @@
 <% form_for(@image, :as => :image, :html => {:method => :delete}, :url => grandstand_gallery_image_path(@gallery, @image)) do %>
   <div class="field">You cannot undo this once it's done! This image will be gone forever - poof!</div>
   <div class="toolbar">
-    <%= button('Delete', :default => true) %>
-    <%= button_link_to('Cancel', grandstand_gallery_path(@gallery), :class => 'cancel') %>
+    <%= button 'Delete', :default => true %>
+    <%= button_link_to 'Cancel', grandstand_gallery_path(@gallery), :class => 'cancel' %>
   </div>
 <% end %>

data/app/views/grandstand/images/edit.html.erb

@@ -2,7 +2,7 @@
 <% form_for(@image, :as => :image, :html => {:multipart => true}, :url => grandstand_gallery_image_path(@gallery, @image)) do |form| %>
   <%= render :partial => 'form', :locals => {:form => form} %>
   <div class="toolbar">
-    <%= button 'Save' %>
-    <%= button_link_to('Cancel', grandstand_gallery_path(@gallery), :class => 'cancel') %>
+    <%= button 'Save', :default => true %>
+    <%= button_link_to 'Cancel', grandstand_gallery_path(@gallery), :class => 'cancel' %>
   </div>
 <% end %>

data/app/views/grandstand/images/new.html.erb

@@ -2,7 +2,7 @@
 <% form_for(@image, :as => :image, :html => {:multipart => true}, :url => grandstand_gallery_images_path) do |form| %>
   <%= render :partial => 'form', :locals => {:form => form} %>
   <div class="toolbar">
-    <%= button 'Add Image' %>
-    <%= button_link_to('Cancel', grandstand_gallery_path(@gallery), :class => 'cancel') %>
+    <%= button 'Add Image', :default => true %>
+    <%= button_link_to 'Cancel', grandstand_gallery_path(@gallery), :class => 'cancel' %>
   </div>
 <% end %>

data/app/views/grandstand/images/show.html.erb

@@ -1,5 +1,5 @@
 <h2>Edit Embedded Image</h2>
-<form action="<%= request.fullpath %>" class="pad" method="POST">
+<form action="<%= request.fullpath %>" method="POST">
   <div class="field">
     <img alt="<%= @image.caption %>" class="float-left" src="<%= @image.url(:grandstand_medium) %>" style="margin:0 10px 10px 0;" />
     <div class="label">Alignment</div>
@@ -28,6 +28,6 @@
   </div>
   <div class="toolbar">
     <%= button 'Update', :default => true %>
-    <%= button_link_to('Cancel', return_path, :class => 'cancel') %>
+    <%= button_link_to 'Cancel', return_path, :class => 'cancel' %>
   </div>
 </form>

data/app/views/grandstand/main/index.html.erb

@@ -1,10 +1,8 @@
-<div class="inset galleries icon">
-  <% if (count = Grandstand::Gallery.count).zero? -%>
-  <h2>You haven't set up any galleries!</h2>
-  <b class="grey">Get started:</b> <%= button_link_to('Add a Gallery', new_grandstand_gallery_path, :class => 'remote') %>
-  <% else %>
-  <h2>You have <%= pluralize(count, 'gallery') %></h2>
-  <%= button_link_to('Visit', grandstand_galleries_path) %>
-  <%= button_link_to('Add Another One', new_grandstand_gallery_path, :class => 'grey remote') %>
-  <% end -%>
-</div>
+<h2>Welcome to <%= Grandstand.app_name %>!</h2>
+<div class="pad">
+  <h3>This is your dashboard.</h3>
+  <p>From here, you can edit things like <%= link_to 'pages', grandstand_pages_path, :class => 'pages icon' %>,
+  <%= link_to 'blog posts', grandstand_posts_path, :class => 'posts icon' %>,
+  <%= link_to 'photo galleries', grandstand_galleries_path, :class => 'galleries icon' %>,
+  and more!
+</div>